This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json) Hash identifier: i22Flw///Sn2xUo49c4W4SW7u98d2KnChle7T90rI5o= Subject key identifier: B0:50:BA:D2:2D:CF:24:EC:CE:8D:06:74:13:C0:D6:DD:1E:47:37:D7 Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3 Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3 Certificate serial: 019AF12E512BF875AE1EF8CD97FC387AD388 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft Manifest number: 0B38 Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: Oi8dDzaxZ180h2ZuXvrzrjSsWLkkboQVP8cJMSgivsg=) 2: p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa (hash: fmxxB5F2kwLUu456RKJpssuFKFMbicdIEkOy2yPaKKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:51:2b:f8:75:ae:1e:f8:cd:97:fc:38:7a:d3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3 Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=b050bad22dcf24ecce8d067413c0d6dd1e4737d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:82:f8:6f:26:31:dd:d9:31:58:4a:28:3c: 03:46:b4:1a:85:c6:00:dc:f7:98:61:68:72:45:18: d1:44:ef:44:68:cf:a7:f3:05:f0:ad:f0:76:f9:e7: ce:db:88:d1:24:2b:e6:f2:94:ae:e0:37:80:22:d2: 31:1b:0d:77:41:99:e9:91:c5:b7:9c:29:a3:ef:e7: 23:66:c3:63:f1:3b:1f:43:4e:46:01:7a:d5:ae:49: 22:35:1c:53:53:38:9c:55:97:d0:8f:ff:26:31:19: 4d:8d:2c:f5:0f:04:d5:13:e8:0f:21:f8:0d:18:49: f8:5c:5b:fd:72:4a:3a:da:16:7f:bb:76:d6:73:32: 91:47:42:12:fa:bc:3e:33:b5:c7:6c:89:6e:ea:47: 7d:09:1d:34:b1:ae:73:bd:56:27:3d:83:80:80:35: 47:ce:d0:b0:6d:4b:6f:88:0a:88:8e:41:5b:10:d6: 20:8b:4e:91:f0:95:ce:cf:9a:8b:55:9d:a2:37:25: 18:a1:00:e8:59:04:c4:c2:94:04:07:df:8f:6a:d3: 81:76:0f:6b:6d:c1:41:c7:bd:d6:4a:ef:eb:88:b1: eb:f2:d9:17:ef:5b:39:24:f7:27:a2:ab:60:7b:41: d5:94:a4:43:cc:cb:19:1e:5d:80:f2:61:17:ce:e8: 79:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:50:BA:D2:2D:CF:24:EC:CE:8D:06:74:13:C0:D6:DD:1E:47:37:D7 X509v3 Authority Key Identifier: keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6f:e2:5b:6c:e7:91:98:ee:72:9e:78:08:b9:a0:7c:6e:2f: 41:bd:c6:05:70:c7:98:a2:cf:3b:7b:b4:06:31:bd:a3:d0:b4: 1c:4c:0e:ee:c8:88:9d:0b:d8:7f:17:a4:61:82:fa:48:cf:8b: e4:d1:9a:be:e6:74:8c:24:17:2d:57:90:f2:8b:68:7f:9f:cd: 2b:c9:ed:2a:52:e5:d6:a6:18:75:c4:be:da:55:c3:d6:d5:94: 30:ad:31:cb:19:bd:e9:6b:aa:80:b2:16:a4:7b:3d:b7:dc:c1: af:e6:d7:11:4b:af:38:5a:0b:8a:c3:0a:a2:24:0e:af:55:23: 9b:74:12:96:e6:c7:2b:94:b5:dd:93:d9:f7:4d:ae:a7:17:78: f2:df:ee:a5:80:82:70:17:7a:2d:87:60:5c:9a:c2:64:a5:4d: 28:65:9d:8f:b2:f2:68:6c:dc:70:cf:eb:7b:5d:88:a4:ed:c6: 6a:25:09:2d:04:ca:74:69:71:6c:68:fb:4d:99:fd:6f:e3:6f: e0:cc:5a:96:44:15:1d:cb:9d:cf:05:14:95:99:51:10:f6:9d: 57:dd:45:76:4c:0f:25:ee:8b:17:bb:35:1b:38:32:c7:a4:91: 9a:9c:e2:67:db:06:50:96:c6:14:f4:f3:65:1e:d1:c0:e1:2b: 95:ba:e6:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlEr+HWuHvjNl/w4etOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzgxYzYyZDM5NDIwMzNkMGE3NDA0NGIwYzVhNGYxMTNl NDNkZjMwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD EyhiMDUwYmFkMjJkY2YyNGVjY2U4ZDA2NzQxM2MwZDZkZDFlNDczN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+KC+G8mMd3ZMVhKKDwDRrQahcYA 3PeYYWhyRRjRRO9EaM+n8wXwrfB2+efO24jRJCvm8pSu4DeAItIxGw13QZnpkcW3 nCmj7+cjZsNj8TsfQ05GAXrVrkkiNRxTUzicVZfQj/8mMRlNjSz1DwTVE+gPIfgN GEn4XFv9cko62hZ/u3bWczKRR0IS+rw+M7XHbIlu6kd9CR00sa5zvVYnPYOAgDVH ztCwbUtviAqIjkFbENYgi06R8JXOz5qLVZ2iNyUYoQDoWQTEwpQEB9+PatOBdg9r bcFBx73WSu/riLHr8tkX71s5JPcnoqtge0HVlKRDzMsZHl2A8mEXzuh5EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBQutItzyTszo0GdBPA1t0eRzfXMB8GA1UdIwQY MBaAFNHIHGLTlCAz0KdARLDFpPET5D3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAt ZGYzMTM4YjQzNGM4LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAtZGYzMTM4YjQzNGM4 LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2/iW2zn kZjucp54CLmgfG4vQb3GBXDHmKLPO3u0BjG9o9C0HEwO7siInQvYfxekYYL6SM+L 5NGavuZ0jCQXLVeQ8otof5/NK8ntKlLl1qYYdcS+2lXD1tWUMK0xyxm96WuqgLIW pHs9t9zBr+bXEUuvOFoLisMKoiQOr1Ujm3QSlubHK5S13ZPZ902upxd48t/upYCC cBd6LYdgXJrCZKVNKGWdj7LyaGzccM/re12IpO3GaiUJLQTKdGlxbGj7TZn9b+Nv 4MxalkQVHcudzwUUlZlREPadV91FdkwPJe6LF7s1Gzgyx6SRmpziZ9sGUJbGFPTz ZR7RwOErlbrm6g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:34 2025 by rpki-client